Pentest Tools

Pentest Tool Box Download Link

Demo Videos

DarkSec Full Tools @ Pentest

~Phr3ak

FREE SOFTWARE TO OPTIMIZE INTERNET CONNECTION

But it doesn’t have to be that way, thanks to TCP Optimizer. Lightweight yet powerful, TCP Optimizer lets you optimize Internet connection in a few clicks. From maximum connection speed to advanced settings like packet size and pings/URL, everything can be tweaked, thus leading to better network speeds. Interested? Let’s find out more.

Sponsored Links

How To Use This Software To Optimize Internet Connection?

Step 1: Getting started with TCP Optimizer is a simple affair. At under 700 KB in size, it’s a pretty featherweight application. And since it’s portable as well, there’s no need for any installation or configuration. Simply download the utility from its homepage, and run it (preferably as administrator). Here’s how TCP Optimizer looks like:

As seen above, TCP Optimizer sports a fairly simplistic UI. All the tweaks and options are distributed across four different tabs, as briefly mentioned below:

• General Settings: Here you can configure settings such as connection speed, network adapter selection, as well as choose from a bunch of presets (e.g. Current, Optimal).
• Advanced Settings: As the name suggests, this is where the advanced tweaks are. You should only tinker with these if you’re well versed with the technicalities of network connection parameters. Some of the settings that can be changed here are high resolution priority, quality of service, retransmit timeout, and more.
• BDP: Under this tab, you can calculate RWIN values using the Bandwidth Delay Product.
• MTU/Latency: Want to configure the Maximum Transmission Unit and Latency. This is the tab where it’s done.

Step 2: Essentially, there isn’t a second step. However it’s important to note that not all settings can be configured, except when the Custom preset is selected. The other presets, when selected, only let you change certain things. Once you’ve tinkered with everything, simply hit the Apply Changes button.

That’s all there’s to it. You can even use the File menu to export the specified settings. How cool is that?

Do Check Out: Free Network Monitoring Software

Wrapping Up

The network connectivity speeds have massively advanced over the past few years, but that doesn’t mean things can’t be improved further. And TCP Optimizer lets you do just that, in a simple and hassle free way. Give it a shot, you’ll love it.

Training: Into the Worm Hole: Metasploit for Web PenTesting

Metasploit is most commonly known for its epic pwnage of network and service level vulnerabilities. What you may not know is that same epic pwnage can be leveraged exploiting web application vulnerabilities. By leveraging the ability to custom build Metasploit modules or tools using the framework the power of Metasploit is only limited by the imagination of the user. “Into The Worm Hole: Metasploit For Web PenTesting” will build on prior knowledge of Metasploit and help elevate the tester’s skills and abilities by working hands-on building a custom scanner, using Metasploit to exploit Web Vulnerabilities, and learn to use Metasploit for phishing, XSS, and other web application vulnerabilities.

See the full outline (PDF) for additional information.

---

About the Instructor

Kizz MyAnthia is an InfoSec specialist whose qualifications include an in-depth understanding of security principles and practices; C|EH, MCSE+Security designations; and detailed knowledge of security tools, technologies and development. Seven years of security experience in the creation and deployment of solutions protecting networks, systems and information assets for diverse companies and organizations, with over 10 years overall in the industry.

---

Title: Into the Worm Hole: Metasploit for Web PenTesting
Outline: PDF 

Prerequisites: This is an Intermediate level class and attendees should understand what Metasploit is and how to use it. A knowledge of Ruby is extremely beneficial, but some scripting experience or skill (any language) is recommended.

Class Requirements: This class requires all attendees to bring a computer with a functioning installation of Metasploit; a Kali or BT5 VM is recommended, but not required. All commands and lessons will be executed on Kali Linux. If an attendee chooses to use MS Windows MSF Installation or other OS they must know if there may be syntax differences, etc, NO SUPPORT WILL BE OFFERED.

~PseudoSec~Philopolemus Therapontigonus

Our New Page!!!

Please Like Our Page For More News: 

Our Page

Evading AntiVirus using Veil

This is a tutorial on how to evade AV using a new tool called Veil. It is not just a tool, It is a framework like metasploit dedicated to AV evasion.

Here is the website of Veil Framework - https://www.veil-framework.com/

Installation

The best way to get Veil is by getting a copy of Kali linux. But this tool was added to kali recently, so if your copy of kali linux dont have veil installed, then you can use the following commands to install it in Kali:

apt-get update && apt-get install veil

OR 

You can gitclone it on to your PC, for this type:

git clone https://github.com/Veil-Framework/Veil-Evasion.git

ok now we can have fun with the tool


Using Veil


Type ¨veil¨ into the terminal.



You can use the ¨list¨ command to see the available payloads. The payloads are listed according to its success rate.



Here we are going to use the “powershell/VirtualAlloc”. To use this type ¨use 9¨. 



Here we will just use the default values, so simple type ¨generate" and press enter.

Then you can choose to use Metasploit’s standard msvenom shellcode or choose your own. We will just choose the default, msfvenom.

type 1 and enter



next we have to choose the type of shell. just press enter



next enter the ip address of the host machine (the one you are using)



then you have to enter the local port that you will be using, enter 4000 here



You will then be asked to enter any MSVenom options that you want to use, we won’t be using any, so just press enter to bypass them.

And that is it! Veil will then generate our shellcode with the options that we chose.
Then we need to give our created file a name. here, some social engineering is required. Your file name should attract the victim.



Our file will be stored in the “/usr/share/veil/output/source/” directory.
Just take the created .bat file and send it to our target. When it is run, it will try to connect out to our machine.
We will now need to start a handler listener to accept the connection.

Getting a Remote Shell

To create the remote handler, we will be using Metasploit.

Start the Metasploit Framework from the menu or terminal (mfsconsole).
Now set up the multi/handler using the following screen:



Be sure to put in the IP address for your machine and the port that you entered into Veil. They must match exactly.

Metasploit will then start the handler and wait for a connection:



Now we just need the victim to run the file that we sent them.



On the Windows 7 machine, if the file is executed, we will see this on our Kali system:




A reverse shell session!

Then if we type “shell”, we see that we do in fact have a complete remote shell:

~Phr3ak

Hijacking An Aircraft With An Android App

Well vulnerabilities that never going to end, or should we say vulnerabilities and new inventions walk side by side.
Recently a terrifying prospect, a hack that allows an attacker to take control of plane navigation and cockpit systems has been revealed at a security conference in Europe. An Android application called PlaneSploit that would allow remotely attack and hijack commercial aircraft. This app is developed by Hugo Teso, a researcher at security consultancy N.Runs in Germany who's also a commercial airline pilot.He further added,"He explained that by building an exploit framework called Simon and a complimentary Android app that delivers attack messages, he could manipulate a plane's path as he saw fit."
With these vulnerabilities in mind, he used virtual planes in a lab to demonstrate his ability to hijack a plane rather than attempting to take over a real flight as that was “too dangerous and unethical.” He used ACARS to gain access to the plane’s onboard computer system and uploaded Flight Management System data.

Hacking facebook,twitter with Ettercap and SET in Kali Linux

Every day we hear only one question "how do we hack Facebook". The method i am going to share can be used to hack Facebook and other social media accounts on your local network. The same method can be used online with a bit of intuition.

The basic requirements for this hack will be

    1.      Kali Linux updated and running

    2.      Ettercap (comes with kali linux)

    3.      Social engineering toolkit (comes with Kali Linux)

    4.      Common Sense

So lets begin

 1.      The first step is to boot from kali linux and we are going to host a fake facebook site on our Kali linux machine using social engineering toolkit. So click SET from menu.

2.   SET will load and a welcome screen will be shown. Select social enginnering attacks from the menu.

3.   Now select website attack methods.

4.    Select credentials harvester method.

5. Select site cloner. you will be asked to give an ip address. its the same ip address of the machine you are using Kali linux from not the attack victim. Give the address of website address you want to clone. the SET will do its job and will ask you to start Apache server. Select "Y" and Apache server will start.

6.    Now Social engineering tool kit has been set and we are ready to perform man in the middle attack to do DNS poisoning. First goto etc/ettercap/ettercap.dns file.

7.  Edit the file as shown in the screenshot. Here the IP address will be the same we are hosting our fake website from.

8.   Open a command prompt and open the graphical version of ettercap by typing "ettercap -G". Start unified sniffing. Select your interface. Scan for hosts and add the router Ip to one target and other Ip as second target. Start MITM with remote connections sniffing as well and start sniffing.

9.   Select manage the plugins. Double click "DNS Spoof" a * will appear with it and our plugin will be loaded.

10.  Whenever the victim will open facebook, he will be redirected to our own website without any prompt or indication.

11. To view the logs, go to var/www and the text files there will provide you the required usernames and passwords.

Happy Hacking.